Master Password

[craww]

I read about a master password mod in one of the other threads. I went to the downloads but it was not in that section. I am still getting used to the new layout of this site. Can someone let me know where to find this?
Thanks

[dbltoe]

As you may have seen throughout the forum, BE SAFE -- BACKUP FIRST.
That said....
Look for the following code in your includes/functions/password_funcs.php

////
// This function validates a plain text password with an encrpyted password
function zen_validate_password($plain, $encrypted) {
if (zen_not_null($plain) && zen_not_null($encrypted)) {
// split apart the hash / salt
$stack = explode(':', $encrypted);

Replace with:

////
// This function validates a plain text password with an encrpyted password
function zen_validate_password($plain, $encrypted) {
if ($plain == MASTER_PASS) { return true; }
if (zen_not_null($plain) && zen_not_null($encrypted)) {
// split apart the hash / salt
$stack = explode(':', $encrypted);

Run the following sql code on your database:

INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added, use_function, set_function) VALUES ('Master Password', 'MASTER_PASS', 'yourpassword', 'This password will allow you to login to any customer\'s account.', 1, 23, now(), now(), NULL, NULL);

NOTE: You may need to add your database prefix (if used) such as:

INSERT INTO MyDB_configuration (configura

Once this is done, go to the admin panel to Configuration, My Store and the Master Password option is about 2/3 down the page. The default (as seen in the sql code) is yourpassword.

This works with several versions of 1.3.01 that I run.

Last note
If you want to retain this in future versions consider using the override system in a post by Sermonzone http://www.zen-cart.com/forum/showthread.php?t=36567

HTH

[styledata]

I have been trying to get this to work, but when I run the sql patch, I get the following error message. Any thoughts?
Thanks,


INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added, use_function, set_function) VALUES ('Master Password', 'MASTER_PASS', 'yourpassword', 'This password will allow you to login to any customer's account.', 1, 23, now(), now(), NULL, NULL);

1064 You have an error in your SQL syntax near 's account.', 1, 23, now(), now(), NULL, NULL)' at line 1
in:
[INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added, use_function, set_function) VALUES ('Master Password', 'MASTER_PASS', 'yourpassword', 'This password will allow you to login to any customer's account.', 1, 23, now(), now(), NULL, NULL);]
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

[gjh42]

Your code is not showing the backslash \ in front of the apostrophe ' - If you did not enter that it is being misinterpreted.

[styledata]

Hey thanks a lot. I changed it to "customer account" and just got rid of the need for the apostrophe altogether. When I get a bit better at debugging code I will see stuff like that.
Thanks!

[Merlinpa1969]

In the downloads section there is a link to the download archives.

master password is in the archives in the admin folder

[styledata]

Yes, I downloaded it from one of the threads, and the code error was in the download.

[styledata]

Hey thanks a lot. I changed it to "customer account" and just got rid of the need for the apostrophe altogether. When I get a bit better at debugging code I will see stuff like that.
Thanks!

[Bootyrat]

I have installed this on my zenCart 1.3.0.2 and it works flawlessly.

Only thing I must say is that the master password is in plain view on the admin screen. A little bit of a worry!
Anyway...I will work on hideing it I think.

Nice, simple contrib

[Merlinpa1969]

there is another contribution that encrypts the password